2026-10-25T14:45:19Z https://njump.cloud.vinney.xyz Taggart :ifin: https://njump.cloud.vinney.xyz/npub1yg8lnapwc8yyd0m32jcfdp7k28hwmsvtsqc59rsj6d6d0m3mynqs7tccz0 https://media.infosec.exchange/infosec.exchange/accounts/avatars/108/196/880/698/187/602/original/0cef8947c107a7a8.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/108/196/880/698/187/602/original/0cef8947c107a7a8.jpg https://njump.cloud.vinney.xyz/nevent1qqsd3ys4zaqsmvxxw209503p5ue5ksjyqx75xtrufl73erqzc6mhf9szyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzjasrrm Jean-Luc Picard showed me a way of being a man that countered the prevailing cultural narrative. His intellect and reticence to use force were virtues to which I aspired. The soul that Stewart brought to that role changed my life. <br/><br/>Clear horizons, Captain.<br/><br/><a href="https://www.hollywoodreporter.com/movies/movie-news/patrick-stewart-dead-star-trek-x-men-1236742932/">https://www.hollywoodreporter.com/movies/movie-news/patrick-stewart-dead-star-trek-x-men-1236742932/</a> 2026-10-29T19:55:12Z https://njump.cloud.vinney.xyz/nevent1qqsvyt2h8klyrgg3znhzkr2xsjyhl62qmd42jwqncax4xzu2884g84gzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzr3ycc2 This is how it feels to work in tech if you like your craft right now.<br/><br/><a href="https://mttagg.art/3mywzdowznc2c">https://mttagg.art/3mywzdowznc2c</a><br/><br/>#poetry #writing 2026-10-28T15:01:32Z https://njump.cloud.vinney.xyz/nevent1qqsxwhk9pd2sg2fan7yfvm4ufswdu2dt0vev32y7yemnqc2mr6kp09czyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzsnep8v In reply to <a href='/nevent1qqsdj608wkp8z6ut8ger6y93qlrtl3syvn6pejkrgqmecx2zr52nw7sf26uut'>nevent1q…6uut</a><br/>_________________________<br/><br/>I&#39;m landing somewhere close to &#34;open source&#34; not equating to &#34;open contributions.&#34; The problem of drive-by slop PRs is largely solved by a requirement to be a known community member before contributing code. That works for larger projects with such a community, but obviously falls apart for the smaller, single-maintainer projects.<br/><br/>I guess my larger point is I think the mechanisms of Git and GitHub have constrained our thinking about what open source participation must look like. 2026-10-27T12:52:39Z https://njump.cloud.vinney.xyz/nevent1qqs2pnxpvaq8z8zc2nu855j68zlpqalamyrnz37ap60zqq74uec5djszyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz6j78rm In reply to <a href='/nevent1qqsr7hek5lqp4nc3vxpkygrtktyfhvjgc0dfyzpwrseg6pc38wdu50czfyjmc'>nevent1q…yjmc</a><br/>_________________________<br/><br/>I&#39;m getting 502s and partial loads on Palo&#39;s site, btw 2026-10-26T19:30:27Z https://njump.cloud.vinney.xyz/nevent1qqsgxz2dt4mtctck6zgq9ag2nfugryejtf4fd9qk74pkjw8x5k2l77szyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzpel8l3 Gonna need someone to explain how much I should trust the revenue and opex numbers in Anthropic&#39;s filing for IPO.<br/><br/><a href="https://www.sec.gov/Archives/edgar/data/2130357/000162828026067168/anthropicpbc-sx1.htm">https://www.sec.gov/Archives/edgar/data/2130357/000162828026067168/anthropicpbc-sx1.htm</a> 2026-10-26T14:27:58Z https://njump.cloud.vinney.xyz/nevent1qqsza32qvru5jn9vw6my2zaghedful2jde279gf4jxuldqu6w3dgcjszyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzr8rd46 In reply to <a href='/nevent1qqsg3wfeuh6cfhsy4gmrc9da8xg2yvdxt8wk68a0n0ey62a6hug4fvqw9zv6l'>nevent1q…zv6l</a><br/>_________________________<br/><br/>If you can derive everything else. 2026-10-26T13:08:29Z https://njump.cloud.vinney.xyz/nevent1qqsgdsc65tlfpry7nyrxz8stuvv82z34nz6qmexvgkyfdau4g40mmzczyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz80cewg In reply to <a href='/nevent1qqs82p9zj2cznu9wxhvsas85yncz4txhsuztum98l2k36wkgwejd57gljl9pj'>nevent1q…l9pj</a><br/>_________________________<br/><br/>What this tells us is exploitation requires knowledge of:&lt;li&gt;PHP version&lt;/li&gt;&lt;li&gt;Reasonable address spaces for the heap&lt;/li&gt;&lt;li&gt;PHP worker count&lt;/li&gt;&lt;li&gt;Exact offsets for all of the above&lt;/li&gt;<br/><br/>Blind attacks are highly likely to fail unless allowed to continue for some time. 2026-10-26T13:06:43Z https://njump.cloud.vinney.xyz/nevent1qqs82p9zj2cznu9wxhvsas85yncz4txhsuztum98l2k36wkgwejd57gzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzgmy7xh The winner of the stealmybitcoin[.]com exploit challenge has a remarkably good writeup on the #PHP2Shell exploit process. The PoC clearly explains what&#39;s involved in targeting and calibration for any given PHP version/deployment.<br/><br/><a href="https://github.com/KillaBoi/StealMyBitcoin-PoC/tree/main">https://github.com/KillaBoi/StealMyBitcoin-PoC/tree/main</a> 2026-10-26T12:33:55Z https://njump.cloud.vinney.xyz/nevent1qqspts07vezvlt9mwwzlp4nyhd7scz648q9lc52qdkkv8eguxfq6t5qzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz6a4awd The real vulnpocalypse was the slop we read along the way. 2026-10-25T19:01:12Z https://njump.cloud.vinney.xyz/nevent1qqs8uxfhpqk08fq44cclc5rgveypvlu4tdf2fkenjunkg0kwjx4nu0qzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz4tearv ## <br/><br/>The Phermi ParadoxIf #PHP2Shell is so gnarly and so many systems are vulnerable, why hasn&#39;t half the internet fallen over?<br/><br/>Couple possibilities:<br/><br/>**1. The exploit is still non-trivial and building the full attack chain is taking some time.**<br/><br/>This is at least partially true. I&#39;ve yet to see a fully reliable proof-of-concept exploit that addresses all versions of PHP. Calif and Wiz showed exploit videos against targets. They didn&#39;t show what pregaming they did to prepare the exploit for those specific targets. So far, it seems like some prior work is necessary to get proper offsets, heap layouts, and payload shapes to exploit properly.<br/><br/>And that&#39;s assuming the mod_php SAPI, which responds differently to this than PHP-FPM.<br/><br/>**2. Patching was aggressive and major targets had time to get in front of this.**<br/><br/>For larger orgs, I believe this is accurate. The message was clear enough, and there was time enough to get any org with a half-awake IT team to circle the wagons. Patching isn&#39;t done, surely, but I think the most enticing targets for notable attacks probably moved quickly.<br/><br/>It&#39;s also worth noting that status dashboards like [this](<a href="https://php2shell.censys.com">https://php2shell.censys.com</a> ) are mostly a fairy tale. Look at the bottom for some whopper disclaimers. OS backports to versions other than PHP&#39;s official patched versions will muddy the picture, as will the **50% of PHP services that don&#39;t report versions**. I&#39;m not saying most of the internet is patched; I&#39;m just saying<br/><br/>But let&#39;s not ignore the alternative:<br/><br/>**3: The exploited won&#39;t know it&#39;s happening and won&#39;t report it.**<br/><br/>This is hardly a new phenomenon PHP sites have been exploited for years without anyone noticing (see: Slot Gacor). Exploitation won&#39;t look like the internet blinking off. It&#39;ll look like a bunch of gambling pages and piracy hosted on school and municipal government websites. Such attacks can lie quietly on PHP sites for years before anyone bothers to look. 2026-10-23T05:58:38Z https://njump.cloud.vinney.xyz/nevent1qqsqnwqzd79rcj4gvpw322jfw7hr5ddrtwgzdje9gwxnqcrayc246mgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzz8jdkv In reply to <a href='/nevent1qqsgar3hxn0tgzr795t7azddqng0tpljlr5wuygyf88wa66v3k7wl6qdmnnwg'>nevent1q…nnwg</a><br/>_________________________<br/><br/>I have arrived at a working PoC based on a GitHub repo. But there are signficant caveats. You need 3 precise things to make it work.&lt;li&gt;Initial offsets for functions are PHP version-specific, so you need those going in. That&#39;s annoying but easy.&lt;/li&gt;&lt;li&gt;Heap layout constants based on Zend MM&#39;s memory layout for the PHP build. You get this with GDB precisely on a PHP instance you control, or fuzzing a target—messy.&lt;/li&gt;&lt;li&gt;The specific shape of the payload to hit the OOM at the right point. This is largely based on memory limit settings in &lt;code&gt;php.ini&lt;/code&gt;.&lt;/li&gt;<br/><br/>So there&#39;s some prior work to hit a vulnerable target. A PHP offset &#34;rainbow table&#34; may be somewhere or getting built, but those specifics may explain the lag in clear evidence of exploitation. 2026-10-22T17:10:58Z https://njump.cloud.vinney.xyz/nevent1qqsgar3hxn0tgzr795t7azddqng0tpljlr5wuygyf88wa66v3k7wl6qzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvztqd6m7 In reply to <a href='/nevent1qqsw2kf3h34lcursmpnda3ecprjpnh0926mawn8r4spzgza8c99s49sy0xaff'>nevent1q…xaff</a><br/>_________________________<br/><br/>Here&#39;s what I basically have so far:&lt;li&gt;Most of the attack logs you see online are folks firing off the GitHub PoCs.&lt;/li&gt;&lt;li&gt;The GitHub PoCs are junk.&lt;/li&gt;&lt;li&gt;I have one (1) PoC that reliably produces a crash, but requires very specific conditions to do anything else, and even then it&#39;s hit-and-miss. I&#39;m not certain how globally exploitable this really is.&lt;/li&gt; 2026-10-22T14:50:57Z https://njump.cloud.vinney.xyz/nevent1qqsw2kf3h34lcursmpnda3ecprjpnh0926mawn8r4spzgza8c99s49szyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzyz0m3m In reply to <a href='/nevent1qqszjart0jcddxn2wuwgg8mx340u9whpktjxy4gtyclryvrzdh92zkgxepfj9'>nevent1q…pfj9</a><br/>_________________________<br/><br/>I&#39;m not 100% here, but I spent all last night reviewing (and attempting to make) so-called PoCs and... not much going on. <br/><br/><a href="https://eliastaylor.com/noexploit/">https://eliastaylor.com/noexploit/</a> 2026-10-22T12:38:55Z https://njump.cloud.vinney.xyz/nevent1qqszjart0jcddxn2wuwgg8mx340u9whpktjxy4gtyclryvrzdh92zkgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzape6gu Has anyone seen (and confirmed) a solid #PHP2Shell proof-of-concept? GitHub is awash in slop. 2026-10-22T05:33:50Z https://njump.cloud.vinney.xyz/nevent1qqsrg0pt4mzkk892etnad80u93vaqezvxfkye8nnmakefac6up2tslqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzk7gzw4 In reply to <a href='/nevent1qqsxz0qr2srgwcj666rdtpkenx6sqt4qutaqsrs78u970sfxqv0d0tspddqws'>nevent1q…dqws</a><br/>_________________________<br/><br/>Messy, but maybe like steel plates 2026-10-21T20:58:41Z https://njump.cloud.vinney.xyz/nevent1qqswvsza0q922zc08lr9m40d55scv286xl7ey2regs4lr5d3t9awcfqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzg257u4 I think maybe let&#39;s just close the internet early. Board up the windows, wait for this all to blow over. 2026-10-21T20:57:51Z https://njump.cloud.vinney.xyz/nevent1qqsrxfn2ny0ql5sr0jr58ujvdmeuafe5fw35uczluk8ctywpdm8mkugzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzfqd687 RE: <a href="https://infosec.exchange/@ifin/117479044318252155">https://infosec.exchange/@ifin/117479044318252155</a><br/><br/>Can&#39;t stress this enough. They won&#39;t know it&#39;s coming and the fallout can be devastating.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1gj88nwn0fejehcc7zaw8ch5f7qv4y8ct8gs080vd0lcnwppces3sahenw9" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1gj8…enw9</a></span><br/> </div> If you are able to contact folks at local schools, governments, nonprofits, and other services to warn them about the PHP vulnerabilities, please consider doing so. These locations often do not have dedicated security staff and almost certainly have PHP assets exposed. </blockquote> 2026-10-21T13:08:17Z https://njump.cloud.vinney.xyz/nevent1qqst4vumapsycz5yvxs689sr993t3csl6u9ttuzg7w8jgf2krw7nksqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvza560yn RE: <a href="https://infosec.exchange/@ifin/117473840482094885">https://infosec.exchange/@ifin/117473840482094885</a><br/><br/>This one is gonna be painful, I&#39;m sorry to say. Please pay close attention if you&#39;re responsible for any aspect of certificate trust chains.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note195x3yzhuzl3tz2pcjsnjl06y82cv2he725x522thxnfqez38nlyqvgfwe0" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note195x…fwe0</a></span><br/> </div> Eight intermediate certificates used by eMudhra/Emsign have been compromised. These certificates are in multiple trust stores. This will require significant manual action to remediate, including the updates of several packages.<br/><br/><a href="https://ifin.network/t/emudhra-intermediate-certificates-compromised/909">https://ifin.network/t/emudhra-intermediate-certificates-compromised/909</a> <br/><br/>#ThreatIntel #ThreatIntelligence #IFIN </blockquote> 2026-10-20T15:03:29Z https://njump.cloud.vinney.xyz/nevent1qqsz8lkugg6xrtnfnzug6x4gn4mwk6ym59qlkd5dn93atsjl5850t3szyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvznm9a0l In reply to <a href='/nevent1qqsw3wh9mrqq50jemltph62qwa4rhy20vrm4pcjdqzrucgn3j8ekx7qppp6wu'>nevent1q…p6wu</a><br/>_________________________<br/><br/>This is cool! Please consider contributing to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>IFIN - The Independent Federated Intelligence Network</span> (<span class="italic">npub1qm4…h363</span>)</a></span> &#39;s Lists project so a larger community can help support this and similar efforts. <br/><br/><a href="https://lists.ifin.network">https://lists.ifin.network</a><br/><br/><a href="https://codeberg.org/IFIN/lists.ifin.network">https://codeberg.org/IFIN/lists.ifin.network</a> 2026-10-18T14:10:27Z https://njump.cloud.vinney.xyz/nevent1qqst508llazlvru0q44ft9eaml76xw0wpvu3y68rh3yzh70xh74y8xczyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz2m35n2 Finally took and passed my #HamRadio Technician exam at #JawnCon! Long-time goal finally crossed off! 2026-10-18T02:08:34Z https://njump.cloud.vinney.xyz/nevent1qqsfnrzcjy5nj0xg3hfervhtf8s33zp5sklrwhququ3c78k2jjemqmszyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz7wmtu9 You have probably seen the excellent reporting CitizenLab about AdFection, the insidious targeting and profiling of journalists (and others) via ad networks. But if not, drop everything and read it now.<br/><br/><a href="https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/">https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/</a><br/><br/>THEN, read Confiant&#39;s companion piece which answers the deep technical questions I had about the infection mechanisms and targeting.<br/><br/><a href="https://blog.confiant.com/p/adint-weaponized-ad-tech-for-zero-click-spyware-and-mass-identity-vacuuming">https://blog.confiant.com/p/adint-weaponized-ad-tech-for-zero-click-spyware-and-mass-identity-vacuuming</a> 2026-10-15T20:24:13Z https://njump.cloud.vinney.xyz/nevent1qqspr9xcdmeek9d06w7p3muv45turckgmcxdlwmq6rjw5lpdyq8xg9gzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz0guzuv RE: <a href="https://infosec.exchange/@ifin/117434320955324418">https://infosec.exchange/@ifin/117434320955324418</a><br/><br/>For non-state actors, sharing information is almost always a benefit.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1h5nm7w8d74znwewzfx7zre4sw4cqzy3m6tuvr4zqjlrdvwct7slqule6qa" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1h5n…e6qa</a></span><br/> </div> Let's reset expectations about sharing information. When defensive action is possible, more sharing means more safety for all of us.<br/><br/><a href="https://ifin-intel.org/blog/tlp-clear/">https://ifin-intel.org/blog/tlp-clear/</a> </blockquote> 2026-10-13T15:36:34Z https://njump.cloud.vinney.xyz/nevent1qqs0y6stp2gep9fesv5369a6a6llhd75ufz0stwny27r0gzrmhupmvgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzkcqj4n CORE MEMORIES UNLOCKED<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/420/404/856/081/545/original/2c1b012e756607c2.png"> <br/> 2026-10-11T04:33:09Z https://njump.cloud.vinney.xyz/nevent1qqsyn77xaag3v7z2whn35ny6j5lucxgle5cdqs7ysmddjdnglddpwrgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzde7ddy It&#39;s finally done. My rewrite of Python for Defenders for 2026 is live!<br/><br/><a href="https://taggartinstitute.org/t/course-catalog/125/21">https://taggartinstitute.org/t/course-catalog/125/21</a><br/><br/>If you want to learn Python the way cybersecurity professionals should, this is the course for you.<br/><br/>And oh yeah, #NoAI was used or is recommended. 2026-10-08T14:32:13Z https://njump.cloud.vinney.xyz/nevent1qqsdwpzpl9yk3uzd7g7eqy57gdpnzdxe4jzvd3z42ypymt4npuxaxxczyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz6t55w0 A legend passes. Spare a moment.<br/><br/>RIP Margaret Hamilton.<br/><br/><a href="https://news.mit.edu/2026/margaret-hamilton-computing-pioneer-dies-1007">https://news.mit.edu/2026/margaret-hamilton-computing-pioneer-dies-1007</a> 2026-10-07T21:45:50Z https://njump.cloud.vinney.xyz/nevent1qqsz00ty0z04pee5df8dawq7qux23cz5ma0s27azs5ega5jke5j4h7qzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzrukvdh In reply to <a href='/nevent1qqsy8fjmcr0phchqjydaj84gx3d7gxc4rkyzhn8ej87yw0j3xldr4acyn7wj6'>nevent1q…7wj6</a><br/>_________________________<br/><br/>.zip about to have a lot of friends on some lists.<br/><br/>Waitaminit... 2026-10-07T21:28:47Z https://njump.cloud.vinney.xyz/nevent1qqsw3m82hnc97s60pk34es4mxm70flmcuy3q6wqx0xhhcq96sqr065gzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzv39c8y In reply to <a href='/nevent1qqs9g6cvzc084rqzafztchajkzk3nlnvp7cljscc883lepl68r90jrs8n5v28'>nevent1q…5v28</a><br/>_________________________<br/><br/>We have the DNS security/policy settings enabled, but that&#39;s not &#34;DPI&#34; (SSL decrypt). The appliance can still parse the unencrypted DNS query packet and apply EDLs. 2026-10-05T16:30:24Z https://njump.cloud.vinney.xyz/nevent1qqs8yu6xdyerakzrajr9mzyuf4cytpgg00tvzaz48wg8wh583aqrdqczyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz067d3n In reply to <a href='/nevent1qqs0n7r5zj26fwq9p38xk9tlzyq77gwqgnj6vt73rd4d0xgvnrfqd3s4nsyd6'>nevent1q…syd6</a><br/>_________________________<br/><br/>I&#39;m a little confused on this one. If I block a domain on my Palo, and then I dig it, I get a timeout to my resolver. Pretty sure we don&#39;t have DPI on, but the Palos will honor domain EDLs and read the query. 2026-10-05T16:27:54Z https://njump.cloud.vinney.xyz/nevent1qqspjsepyna8trl4stxj8vtalwv90p3jtmn8x8rmtxq2wc4x7zp4fsgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz7sw2w6 In reply to <a href='/nevent1qqstddwhusafefe9lehdrytt3nhmjcexsjt2dksdgnnke5nm5wxg66q0f33mr'>nevent1q…33mr</a><br/>_________________________<br/><br/>Report support from China is excellent. 2026-10-05T16:17:41Z https://njump.cloud.vinney.xyz/nevent1qqs0xmfr5jgjgemzgytz3wf2n6gln0trwvty623t5spw9flaf337rwqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz77evu0 RE: <a href="https://infosec.exchange/@ifin/117374929062891877">https://infosec.exchange/@ifin/117374929062891877</a><br/><br/>We need to look out for each other because the companies can&#39;t or won&#39;t.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1mwkjljsd5tnnv2er5u5huyqsmu79uh2ku0jl7na02a7kveywqsds3ph7fe" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1mwk…h7fe</a></span><br/> </div> If you are having #Citrix #Netscaler issues after applying all patches and remediations and want to confidentially share intel, let us know: tips@ifin-intel.org <br/><br/>PGP key available at <a href="https://ifin-intel.org/contact/">https://ifin-intel.org/contact/</a> </blockquote> 2026-10-03T03:48:34Z https://njump.cloud.vinney.xyz/nevent1qqsfxrxk25w8rxxpxdt0wua95avfmktk0h4surd7z78mffcjnmj86qszyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzgacgla 99% of enterprise AI projects<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/367/843/341/986/914/original/cf72795f9f4fd68d.png"> <br/> 2026-10-01T21:46:04Z https://njump.cloud.vinney.xyz/nevent1qqsvhz2jvunj8cgmecwt28pw4pcv8azg47huht9pvkc85fkq2mgn9zgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzm9zqx2 In reply to <a href='/nevent1qqsqd52ms5cupyhujun5m9mw9xhallvhqfetqxd6fhycusuypqaumnc3ppmfr'>nevent1q…pmfr</a><br/>_________________________<br/><br/>Super excited for my first JawnCon! 2026-10-01T17:54:09Z https://njump.cloud.vinney.xyz/nevent1qqs0azrck7suar85xphn2nyjcx64363ghz035dt6ck9qgcejnfwvnrqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz0k42nw RE: <a href="https://infosec.exchange/@ifin/117355048621726077">https://infosec.exchange/@ifin/117355048621726077</a><br/><br/>Yo go read <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17cvzvmxvn6exfnjrff7r0656nj2dys6qndtx4qtfhgl0m73a5vcsk39jd4" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Chilly :donor: 🛡️ :gayint: :ifin:</span> (<span class="italic">npub17cv…9jd4</span>)</a></span>&#39;s latest opus on IFIN&#39;s blog. It&#39;s a fantastic overview of what&#39;s available for defenders to handle the flood of new CVEs. Quite timely, given what we saw from the Linux kernel today.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1xdgj6k9q86tw8vlqaugxgjpdppwtruz6yvqcv9mc94cz6wfv53nqpvx6ua" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1xdg…x6ua</a></span><br/> </div> If you're involved in vulnerability management/VulnOps, the last several months have been overwhelming. But take heart: there is a path forward, despite the madness surrounding us.<br/><br/><a href="https://ifin-intel.org/blog/vuln-flood/">https://ifin-intel.org/blog/vuln-flood/</a> </blockquote> 2026-09-29T15:33:32Z https://njump.cloud.vinney.xyz/nevent1qqsd35jmmjuv0fx0yk7y00y6d3l53h2mzmmqa4k0yka2agne559vs8czyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvznyffsz In reply to <a href='/nevent1qqs9wgp4e996y8zss44a3arsu9f7flsyqpsgsk0tkpe6yxufw88h8lslenycm'>nevent1q…nycm</a><br/>_________________________<br/><br/>I love this takeaway, especially given the sanctimony of that cohort. 2026-09-29T13:23:57Z https://njump.cloud.vinney.xyz/nevent1qqswk398nuz06adfgxj0w74f3zghz62cvhvgezs6539687r8g2rv30qzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzv8ddnj Today is very effectively making the argument for us at <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>IFIN - The Independent Federated Intelligence Network</span> (<span class="italic">npub1qm4…h363</span>)</a></span> that TLP:CLEAR should be the *default*, and only extremely sensitive intelligence should be withheld. Active exploitation is not a reason to withhold, given the fact that more information always advantages defenders. 2026-09-27T20:25:50Z https://njump.cloud.vinney.xyz/nevent1qqspmd82nkh0de50fvy24p5mlpvwfu80t6kauqsf95anxg9l5xj5q4czyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz7f2ml6 RE: <a href="https://infosec.exchange/@cR0w/117327209596158263">https://infosec.exchange/@cR0w/117327209596158263</a><br/><br/>cR0w is a rockstar. Get this corvid before someone else does.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note19ztvqx9aw6saau77xn8eq4kdj3u3n25z8e7zdleerer9427m3elsg6ca38" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note19zt…ca38</a></span><br/> </div> Hey, so, anyone out there looking to hire a remote nerd? I've spent the past 4-5 years doing threat hunting, detection engineering, threat intel, and incident response for large US West utilities. Gotta be full WFH though due to health reasons. Non-LinkedIn, non-ghost job links appreciated.<br/><br/>#getFediHired </blockquote> 2026-09-24T19:14:33Z https://njump.cloud.vinney.xyz/nevent1qqs9fc8dp2ttwmjruzqz3ffrdgw5vsa8y2xnku4tpl259hnlel7e9agzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz5tru7t Whenever an AI company tells you about security, believe the opposite.<br/><br/><a href="https://mouse.dev/blog/muse-runtime-export/">https://mouse.dev/blog/muse-runtime-export/</a> 2026-09-24T15:20:46Z https://njump.cloud.vinney.xyz/nevent1qqs2cuqdmdha5w9vfvtefvqqxhte8zv95vj7ml5xldacxr3xnlmkpyqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzj06acf Sorry, but I think I&#39;ll pass. I don&#39;t need to know how good the models are at CTFs; we just had a bunch of news stories about that.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/321/543/788/725/840/original/2c637b0a3263f876.png"> <br/> 2026-09-23T17:31:29Z https://njump.cloud.vinney.xyz/nevent1qqs2uvp2m7xy59eudj09s3wvyzj8p2cdsnp7khgwwc2xhysvvcuaqfqzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvzgxm5mm Feeling really good about use of work time today.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/310/700/159/881/780/original/3a179a4ac537a3e9.png"> <br/> 2026-09-21T19:33:48Z https://njump.cloud.vinney.xyz/nevent1qqsw9t2x6yna48tmlmgj3ht4n0xp232njpzgftp97xayduv3kj68ytgzyq3ql7059mqus34lw92tp9586eg7amwp3wqrzs5wztfhf4lw8vjvz5cjk8p In reply to <a href='/nevent1qqs06nkqw384yl5mdd6hk8cg0xe8fp2kguv00usj9503nd93pepag3cmfuxgy'>nevent1q…uxgy</a><br/>_________________________<br/><br/>A patsy must take action in order to plausibly take the fall. 2026-09-20T13:59:23Z